[Oisf-devel] Query about Suricata behaviour difference on x86 and XLP

[Mahendra Ladhe]

Hi,
  I compiled Suricata 2.0.2 on an x86 machine running 64-bit Ubuntu 12.04.4 LTS
(The processor is Intel(R) Core(TM)2 Duo CPU     E7400  @ 2.80GHz)
Then I ran it on a 230 MB pcap file with following command line

$ sudo /usr/bin/suricata -c /etc/suricata//suricata.yaml -r ./purplehaze.pcap

After a few seconds, it neatly exits after printing some log on the screen.

Next I cross compiled Suricata same version and ran it on XLP processor 
(multi-core multi-threaded MIPS processor: 4 CPU threads per core * 16 cores = 64 CPU threads)
using the same command line

$ suricata -r purplehaze.pcap -c /etc/suricata/suricata.yaml

It prints the following lines and gets stuck after that.

2/6/1970 -- 10:42:14 - <Notice> - This is Suricata version 2.0.2 RELEASE
2/6/1970 -- 10:42:42 - <Warning> - [ERRCODE: SC_ERR_NOT_SUPPORTED(225)] - Eve-log support not compiled in. Reconfigure/recompile with libjansson.
2/6/1970 -- 10:42:43 - <Notice> - all 97 packet processing threads, 3 management threads initialized, engine started.

It simply doesn't quit.
Am I missing something here ?
Why are the behaviours different on x86 and XLP with everything else remaining the same ?

Thank you,
Mahendra
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20140717/710bbb11/attachment.html>